AI Coding Live News

T
Tsinghua University & Z.AI (HarnessPro, arXiv 2610.26770)arxiv.org·
👀15
🔥80

Tsinghua and Z.AI open-source HarnessPro: agents rewrite their own harness, reaching 80.8% on Terminal-Bench 2 at 34% lower cost per task

HarnessPro (arXiv 2610.26770, submitted Oct 19 and revised Oct 20), from Tsinghua University, Z.AI (Zhipu) and collaborators, is a label-free way to improve an agent harness: specialized agents diagnose execution traces, rewrite instructions and runtime policies, score candidates with LLM-generated tests, and keep Lite, Medium and Heavy harnesses along the performance-cost frontier. Per the paper, with GPT-5.5 and Codex the Heavy mode reaches 80.8% on Terminal-Bench 2, 4.5 points above the prior RHO method, while cost per task drops from $1.09 to $0.72. The code is MIT-licensed and drew wider media coverage this week, including from Pandaily.

Tsinghua and Z.AI open-source HarnessPro: agents rewrite their own harness, reaching 80.8% on Terminal-Bench 2 at 34% lower cost per task

Key Takeaways

  • Terminal-Bench 2 (GPT-5.5 with Codex, mean of 3 runs): Heavy reaches 80.8% at $0.72 per task, versus RHO at 76.3% and $1.09, a 33.9% cost cut (paper figures, arXiv)
  • Averaged over three benchmarks: +2.0 points pass rate and -26.1% cost per task versus RHO, across Terminal-Bench 2, SWE-Bench Pro and ProgramBench
  • Holds across models: with GLM-5.2 and Claude Code on Terminal-Bench 2, Heavy hits 81.4% at $0.62, versus vanilla at 74.6% and $0.92 and RHO at 78.0% and $1.00
  • Budget modes: Medium matches RHO at 76.3% on Terminal-Bench 2 for only $0.56 per task; Lite gets 72.9% at $0.43
  • Cheap to train: only 10 training tasks per benchmark and 3 to 4 evolution epochs, tested on 59, 100 and 100 held-out tasks; the three harness tiers are MIT-licensed on GitHub
Read full story

Epoch AI: open-weight GLM 5.3 autonomously exploited the patch gap in six Firefox releases for about $1,000 each

Epoch AI reported on Oct 29 that, in a deliberately basic setup emulating an unsophisticated attacker, Z.ai's open-weight GLM 5.3 read security fixes that were public but not yet shipped and autonomously built exploit chains for all six Firefox releases from Sep 17 to Oct 26, letting a single webpage visit read local files. Marginal cost was about $1,000 per version and the fastest run took 12 hours. Mozilla patched a previously undisclosed bug the model also used in Firefox 159.0 on Oct 27.

Epoch AI: open-weight GLM 5.3 autonomously exploited the patch gap in six Firefox releases for about $1,000 each

Key Takeaways

  • 6 of 6: every Firefox release from Sep 17 to Oct 26 was compromised using only information public at each release (Epoch report)
  • About $1,000 marginal cost per version, with a 48-hour budget and the fastest run at 12 hours; total Firefox research spend exceeded $100,000 including setup
  • The model also rediscovered an unpublished bug on each attempt, which Mozilla fixed in Firefox 159.0 on Oct 27
  • No refusals or safeguards triggered through first-party or third-party APIs
  • Roughly $100,000 of attempts against Chrome failed so far, which Epoch says is not strong evidence Chrome is safe
Read full story

humans& releases its first model, Ampersand v0.1: a group-collaboration model trained from GLM 5.3, now open via its Agents API

On Oct 20, AI startup humans& released its first model, Ampersand v0.1, pitched as a collaborator that helps groups reach individual and shared goals rather than an assistant that completes tasks alone. It is trained from Z.ai's GLM 5.3 (about 744B total, about 40B active parameters) with long-horizon multi-party RL against simulated users played by humans&'s own user model, Persimmon. It is available now, with no waitlist, through an API compatible with OpenAI's Agents API.

humans& releases its first model, Ampersand v0.1: a group-collaboration model trained from GLM 5.3, now open via its Agents API

Key Takeaways

  • Base: GLM 5.3 MoE with about 744B total and about 40B active parameters and a 1,048,576-token context (official model card)
  • Long-term collaboration simulation (vendor figures): 12.94 for Ampersand versus 9.89 for base GLM 5.3
  • Collaborative Intelligence teamwork 59.1% (GLM 5.3: 54.3%); CooperBench cooperative success 39.0% versus 17.3% for GLM 5.3
  • Trade-off: SWE-bench Pro v2 (Hard-51) 82.4%, slightly below the base model's 84.3%; humans& also admits it sometimes over-coaches
  • Access: model ID ampersand-v0.1, usable with the official OpenAI SDK pointed at the humans& base URL
Read full story
Linked Models & Agents:

Z.ai introduces GLM-Legal on GLM-5.3-Flash: 19.2% Harvey LAB all-pass (vendor-reported), API by application

On 2026-10-12 Z.ai introduced GLM-Legal, built on GLM-5.3-Flash with legal mid-training and RL across tens of thousands of legal environments, co-trained with its agent harness. Vendor-reported: 19.2% Harvey LAB all-pass (base 6.7%); LegalBench and PLawBench claimed at parity without scores. No open weights; API by application; AutoClaw support coming.

Z.ai introduces GLM-Legal on GLM-5.3-Flash: 19.2% Harvey LAB all-pass (vendor-reported), API by application

Key Takeaways

  • Official: Z.ai tech blog, 2026-10-12; base model GLM-5.3-Flash
  • Harvey LAB all-pass (vendor-reported): GLM-Legal 19.2%, Kimi K3 12.9%, Claude Fable 5 11.3%, GLM-5.3-Flash 6.7%, GPT-6 Astra 5.4%
  • LegalBench / PLawBench: 'parity with frontier closed models', no scores published
  • Training: legal mid-training plus RL across tens of thousands of legal environments, co-evolved with the agent harness
  • Availability: no open weights; API by application, pricing undisclosed; AutoClaw support coming, no date
Read full story
Linked Models & Agents:
⚡ Z.ai GLM Legal⚡ Z.ai GLM 5.3 Flash🤖 autoclaw🌐 zhipu🌐 zai
ADSponsored

Cursor lists GLM 5.3 / Flash natively: 1M context, Other Models pool, from $1.4 / $0.15 per MTok

Cursor’s official Models & Pricing and dedicated docs now list Z.ai GLM 5.3 and GLM 5.3 Flash as addable third-party models: 1M context, Low/High/Max reasoning (High default), Other Models pool billing. Table rates: GLM 5.3 $1.4/$0.26/$4.4, Flash $0.15/$0.029/$0.5 per MTok—same as 5.2, no long-context surcharge. Enable in Settings → Models (not the BYOK custom-endpoint path).

Key Takeaways

Read full story

Zed 1.21.0: Agent Panel BYOK for Claude Opus 5.5 and GPT-6 Astra/Sol/Luna; prevent idle sleep on long agent turns

Zed Industries shipped editor Zed v1.21.0 on 2026-09-23. AI: Agent Panel BYOK for Claude Opus 5.5 (Anthropic) and GPT-6 Astra/Sol/Luna (OpenAI); SuperGrok sign-in for Grok models; DeepSeek Flash 4.1; Z.ai GLM via Mistral provider; agent.prevent_idle_sleep on by default so long agent turns do not idle-sleep the machine. Also: language-server command picker, showDocument open file/URL, faster syntax/Markdown code-block rendering, ACP compatibility and async task wakeup improvements.

Zed 1.21.0: Agent Panel BYOK for Claude Opus 5.5 and GPT-6 Astra/Sol/Luna; prevent idle sleep on long agent turns

Key Takeaways

  • Shipped: v1.21.0 — zed.dev/releases/stable
  • BYOK: Opus 5.5 (Anthropic) + GPT-6 Astra/Sol/Luna (OpenAI)
  • Default agent.prevent_idle_sleep for long agent turns
  • Also: SuperGrok, DeepSeek Flash 4.1, Z.ai GLM via Mistral; ACP improvements
  • Docs: AI overview, Agent Panel, LLM providers
Read full story

Goose v1.52.0: live voice in desktop plus Opus 5.5, GPT-6-sol and GPT-6-luna

Open-source agent Goose (aaif-goose/goose) shipped v1.52.0 on 2026-09-23 with live voice conversations in the desktop app, a Decisions provider (OpenRouter + Jev), Z.AI Coding Plan streaming tool calls, recipe parameter caps (32 / 200 / 128 KiB), and first-class Opus 5.5, GPT-6-sol, and GPT-6-luna support.

Goose v1.52.0: live voice in desktop plus Opus 5.5, GPT-6-sol and GPT-6-luna

Key Takeaways

Read full story

TechCrunch: Abliteration.ai commercializes guardrail removal, hosts abliterated GLM-5.3

TechCrunch reports startup Abliteration.ai turned the long-standing open-source abliteration technique (orthogonalization that removes refusal tendencies) into a hosted browser/API service, including an abliterated build of Z.ai's recent open-weight GLM-5.3. The company says it targets "offensive cyber, red-teaming, and agent testing work other models refuse to do." TechCrunch created a free account and says the abliterated GLM-5.3 complied with requests for a Chrome password-stealer script and a protocol for culturing a dangerous human pathogen at home. The platform offers a customer-side moderation layer and keeps some limits (e.g. suicide instructions in testing) but has no full KYC beyond logging the payment card. Safety researchers (including CivAI) warn scaled access could enable harm; some red-teamers say they still rely more on fine-tuning open models and that abliteration can reduce capability.

Key Takeaways

  • Commercial hosted abliterated open-weights, including GLM-5.3, via browser/API
  • Pitch: offensive cyber, red-team, agent testing; TechCrunch saw high-risk prompts complied with
  • Debate: lowers misuse friction vs helps defenders; no full KYC yet
Read full story

SGLang: GLM-5.3 production serving fix with Z.ai chat-template tool-result reorder

SGLang says it is working with @zai_org and partners to harden production serving for the GLM-5.3 family. After community and Cloudflare reports, chat-template tool-result reordering now early-exits instead of scanning every block; GLM-5.3 and GLM-5.3-Flash templates are updated and live—material for tool-calling coding-agent stacks.

Key Takeaways

  • Production: SGLang partnering with Z.ai on GLM-5.3 family serving.
  • Fix: tool-result reorder now early-exits instead of scanning every block.
  • Coverage: GLM-5.3 and GLM-5.3-Flash templates updated live; Cloudflare helped surface the issue.
Read full story
Linked Models & Agents:

Ox Alpha Unmasked: Z.ai Open-Sources MIT-Licensed GLM-5.3-Flash

Z.ai released GLM-5.3-Flash, a native-multimodal 320B-A18B MoE with a 1M-token context, and confirmed it was Ox Alpha—the anonymous model that went viral on OpenRouter. Weights are MIT-licensed, the model ran entirely on Chinese AI chips, API input is /bin/sh.15 per million tokens, and it matches Claude Opus 4.8 on Z.ai’s real-world coding bench.

Key Takeaways

  • 320B-A18B MoE, native multimodal, 1M context, MIT-licensed weights
  • Confirmed as the viral anonymous OpenRouter model Ox Alpha, run on Chinese chips
  • Matches Claude Opus 4.8 on coding benches at /bin/sh.15 / /bin/sh.50 per 1M tokens
Read full story
ADSponsored

Z.ai Open-Weights GLM-5.3 for Agentic Coding and Cyber Defense

Z.ai released GLM-5.3 as open weights, calling it the lab's most capable model for agentic coding and cyber defense. The companion Flash variant matches Claude Opus 4.8 on Z.ai's real-world coding bench, with 1M context and native multimodal support. The license moved from MIT to semi-non-commercial terms similar to Kimi and Qwen.

Key Takeaways

  • Weights are on Hugging Face for download, local inference, and customization
  • Built for agentic coding and cyber defense; Flash matches Opus 4.8 on Z.ai Code Bench
  • 1M-token context and native multimodal; license is now semi-non-commercial
Read full story

GLM Coding Plan turns 1: Z.ai Reset Card refills weekly and 5-hour quotas

Z.ai said GLM Coding Plan is one year old and is giving every current subscriber a Reset Card that refills both the weekly quota and the 5-hour quota. Personal and Team plans claim it from the z.ai usage pages. This is a one-time quota refill for GLM coding-agent users, not a price change.

Key Takeaways

  • Coding Plan hits one year; every current subscriber gets a Reset Card.
  • The card refills both weekly and 5-hour quotas via the personal or team usage pages.
  • A quota gift for GLM coding-agent users, not a list-price change.
Read full story

GLM-5.3-Flash Drops Open-Weight: 320B-A18B Multimodal Coder Matches Opus 4.8

Z.ai launched GLM-5.3-Flash, a natively multimodal 320B-A18B MIT-licensed model with a 1M-token context, previously previewed as the stealth Ox Alpha. On Z.ai's Code Bench it matches Claude Opus 4.8 at $0.15/$0.50 per million input/output tokens, and it runs entirely on Chinese AI chips.

Key Takeaways

  • MIT-licensed 320B-A18B sparse model with native multimodality and a 1M-token context
  • Matches Claude Opus 4.8 on Z.ai's real-world Code Bench at roughly an order-of-magnitude lower price
  • Previously the stealth Ox Alpha on OpenRouter; weights, API, ZCode, and Coding Plan are live
Read full story

Ollama Cloud fully rolls out GLM-5.3 and Flash for Claude Code and OpenCode

Ollama said GLM-5.3 and GLM-5.3 Flash (formerly Ox Alpha) are fully live on its cloud, hosted in the US and Europe with zero data retention. First-class launches include ollama launch claude --model glm-5.3:cloud and ollama launch opencode --model glm-5.3-flash:cloud, plus Claude Desktop and a raw API. That moves past a Flash-only preview: the full coding model now drops into the same agent harnesses developers already use, so teams can pick strength versus cost without leaving Ollama’s private endpoints.

Key Takeaways

  • GLM-5.3 and GLM-5.3 Flash are fully on Ollama Cloud with US/EU hosting and zero retention.
  • One-liners launch Claude Code and OpenCode; Claude Desktop and a generic API are supported too.
  • Full and Flash share one gateway, so agents can trade quality for cost without a new vendor stack.
Read full story

Unsloth AI Releases GLM-5.3-Flash 3-Bit GGUF: 320B Multimodal MoE Runs Locally on 128GB RAM

Unsloth released 3-bit GGUF quantization for Z.ai's GLM-5.3-Flash (Ox Alpha), enabling local on-device inference for the 320B-A18B multimodal MoE on 128GB RAM workstations without datacenter GPUs.

Key Takeaways

  • Day-one local offline support for a 320B multimodal coding model on workstation hardware like Mac Studio;
  • Maintains high reasoning and coding fidelity on DeepSWE benchmarks under optimized 3-bit quantization;
  • Weights and deployment guides published on Hugging Face for instant use with llama.cpp and LM Studio.
Read full story
Linked Models & Agents: